??????? ?????? ?????? ???? ActiveX ??????? OLE ?? ?????? Office 2003 ?2007 Office?

???? ???????: 2252664 - ??? ???????? ???? ????? ????? ??? ???????.
??? ????? ??? ??????? ??????? ???? ????? ???????? ??? ??? ??????? ?????? ?? ????? ????? ????? ????? ?????? ???????? ??? ???? ?????????. ?????? ????? ??? ????????? ?????? ?? ???? ?????? ?????. ??? ?????? ?????? ??? ?????????? ????? ????? ??????? ???????? ?????? ??? ???? ?????? ?? ???? ??????? ?????? ??. ?? ???? ????? ??? ???? ??????? ?? ?????? ??? ????? ?????? ?????? ???????? ?? ????? ???? ?????????.
????? ???? | ?? ????

?? ??? ??????

?????

????? ??? ??????? ??? ????? ??????? ?????? ??????? ?? ????????? ??????????.

???? ??? ??????? ?????? ?????????? ??????? ?????? ???? ??? ???? ????? ???? ActiveX ??????? OLE ???? ???????? ?????? ?? ????? Microsoft Office ?? ??? ???????? ??? ????? ?????? ????. ?????? ??? ???? ?? ????????? ??? ???? ?? ????? Windows Internet Explorer ???? ????? ???? ??? ??????? ?????? ??? ????? ????? AlternateCLSIDs ???? ???? ?????? ???? ActiveX ???? ?? ??????? ????????? ???? ????? ????? ????? ???? ???? ActiveX ?? Internet Explorer
(http://go.microsoft.com/fwlink/?LinkId=183124)
.

?????? ????? ??????? ????????? ?????? ??????? ??????? ??????? ???????? ?? Active Template Library ?(ATL) ???? ?? ???? ?????? ??????? ?????? ?? ???? ?(?? ????? ??? ??????? ??? ???????? ??? ????? ?????? ?????????? ?(????? ?? ??? ?????? ???)):
973882
(http://support.microsoft.com/kb/973882/ )
? ????? ??????? ?????? ?? Microsoft: ???? ????? ????? ?? Microsoft Active Template Library ??(ATL) ?? ???? ?????? ????????? ???????? ?? ????

???? ??????? ???? ??????? ??????? ?? ????? ??????? ????????? ?????? ??? ???????? ?? ????? ????? ATL ??????? ???. ???????? ??? ???? ??? ????? ?????? ????? ?? ?????? ???? ?? ???? ATL ?? ??? ??????? ??????.

????? ??? ??????? ?????? ??? Microsoft Word ?Microsoft Excel ?Microsoft PowerPoint ?Microsoft Publisher? ???????? ??? Microsoft Visio.

?? ????? Office COM

????? ????? ??????? ?? ????? Office COM ???? ?? ?????? ?? ??????? ?????? ?? MS10-036 ???? ????? ?????? COM ????? ??? ??????? Office. ????? ?????? COM ??????? ??? ????? ???? ActiveX ??????? OLE. ?????? ????? ?? ???? ????? ?????? ???? ????? ?? ????? ?????? OLE ?ActiveX ???? ??? ??? ??????? ??? ??????? Office.

??????? ????
  • ?? ???? ????? ?? ????? Office COM ?? ????? ????? OLE? ?? ??? ????? ??????? ??? ???? ?????? ???? ???? ??????.
  • ?? Office 2007? ????? ?????????? ????? ????? ???????:

    ??? ?? ??? ????? ????? OLE ???????? ????????.
  • ?? Office 2003? ????? ?????????? ????? ????? ???????:
    ???? ?????? ????? ???? ???. ?? ??? ??????.


?????? CLSID ???? ??? ??????? ?????? Process Monitor
(http://technet.microsoft.com/ar-sa/sysinternals/bb896645.aspx)
?(?????? ???????) ?? TechNet. ???? ?? ????? ?? ????? Internet Explorer ?? ??? ??? Process Monitor ?(?????? ???????).
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\<CLSID?>

?????? ?? ???? ?????? ?? ??????? ???????? ????? COM. ?? ???? ?????? ????? ?? ???? ????? ?????. ??? ????? ?? ??????? ????? ???? ????? ?????? ??? ???? ????? ?????? ??? ????? ????? ???? ???? ActiveX.

????? ????? AlternateCLSID ?(??????? ????? ?? "Phoenix bit" ?(?? ??????)) ?? ???? ????? ??? CLSID ????? ????? ???? ActiveX ???? ?(??? ????? ???? ???? ActiveX ??? ?????? ????? ??????)? ?? CLSID ????? ????? ???? ActiveX ???? ?? ????? ?? ????? Office COM ????. ?? ???? Office ????? ?? AlternateCLSID ??? ?? ???? ??????? ?????? COM ????? ???? ActiveX.

?????? ???? ?????? ?? ????? Office ???????? ??? ????? ?? ????? Internet Explorer. ??? ???? ??????? ???? ????? ?? ????? Office COM ??? ????? Internet Explorer ActiveX ???? ???? ???? ActiveX. ???? ?? ??? ????? AlternateCLSID ??? ?? ??????? ?????? ??????? Internet Explorer. ?? ??? ?????????? ???? ????? ??? ?????????. ?? ??? ??? ???????? ???? ???????? ?? ????? Office COM ????????? ??? ??? ????? ???? ??????.

????? ?? ????? Office COM

??? ????? ??? ????? ?? ??????? ?? ?????? ??? ??????? ???? ???? ????? ????? ?????. ??? ???? ?? ???? ?????? ????? ?? ???? ????? ????? ?????? ??? ?????. ?????? ??? ?????? ?? ????? ??????? ??????? ??????. ??????? ????????? ?? ???? ???? ???????? ?? ????? ??? ??????. ????? ??? ??? ??????? ????? ?? ???? ???? ??? ?????. ????? ?? ????????? ??? ????? ??? ???? ???????? ?? ????? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ????? Microsoft" ?(?? ????? ??? ??????? ??? ???????? ??? ????? ?????? ?????????? ?(????? ?? ??? ?????? ???)):
322756
(http://support.microsoft.com/kb/322756/ )
? ????? ??? ???? ???????? ?? ????? ????????? ?? ???? ??????? Windows XP
???? ???? ????? ?? ????? Office COM ?? ????? ??? ???:
HKEY_LOCAL_MACHINE/Software/Microsoft/Office/Common/COM Compatibility/?{CLSID}
?? ??? ??????? ???? CLSID ?? ???? ????? ????? ????? COM. ?????? ?? ????? Office COM? ??? ????? ????? ??????? ?????? ?? CLSID ????? ????? ???? ActiveX ?? ???? OLE ???? ???? ??? ??????. ??? ????? ????? ???? REG_DWORD ?????? ?????? ??????? ??? 0x00000400.

??? ???? ?????? ?????? ?? ????? Office COM ????? ???? CLSID ?{77061A9C-2F18-4f38-B294-F6BCC8443D24}? ?? ?????? ???? ??????? ?????? ??????? ?????? REG_SZ ?{77061A9C-2F18-4f38-B294-F6BCC8443D24} ??? ??????? ??????:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility
?? ??? ??????? ???? ?????? ???????:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{77061A9C-2F18-4f38-B294-F6BCC8443D24}
??? ????? ????? ???? ????? ???? 0x???????? ??? ??????? {CLSID}? ??? ????? ?? ????? Office COM. ???? ???????? ??? ?? ?? ??? ?? ?????? ?? ??????? ?????? ??? ?? ????? ?????? ?? ?????.

?????? ??? ???? ?? ?????????? ?? ?????? ???? Microsoft ??????? ??? ????? ??????? ??? ??????? ????????? ???????? ??? ???????:

??????? ????????? ??? ?? ???????: ????? 1 ?? 3
(http://blogs.technet.com/srd/archive/2008/02/06/the-kill_2d00_bit-faq_3a00_-part-1-of-3.aspx)

????? ????? ????? ?? ????? Internet Explorer ??????? OLE

???? ?? ?????? Override IE kill-bit list ?(????? ????? ?? ????? IE) ????? ??? ??????? ??? ?????? OLE ???????? ?? ????? ?? ????? Internet Explorer ??????? ???????? ??? Office. ?? ?????? Override IE kill-bit list ?(????? ????? ?? ????? IE) ??? ??? ??? ???? ?? ????? ???? OLE ?? Office ??? ?????. ??? ?? ???? ??? ????? ???? ????? ???? Office ???? ????? Override IE kill-bit list ?(????? ????? ?? ????? IE)? ??? Office ???? ????? ??????? ??? ??? ??? ?? ????? Office COM ???????? ?? ??. ?? ???? ????? ?? ????? Office COM? ?? ??? ????? ???? OLE.

?????? ?????? Override IE kill-bit list ?(????? ????? ?? ????? IE)? ??? ????? ???? OLE ?????? ?????. ?? ?????? ?? ???? ??? ???? ??????? ?????? ??????? ?? ?????? ????? ???? ???? Implemented Categories ?(?????? ???????) ??? CLSID ????? ????? COM. ?? ??? ??? ?????? ????? ???? ????? ??? ???? ????? ?(CATID) ??????? OLE? ?{F3E0281E-C257-444E-87E7-F3DC29B62BBD}? ??? ??????? Implemented Categories ?(?????? ???????).

??? ???? ??????? ???? ????? Internet Explorer ?????? ???? OLE? ????? ?? ???? ????? ??? ??????? ??? ?????? ?? Office. ?? ??? ??????? ??? ????? ????? ?? CLSID ????? OLE ??? ?? ?????? ?????? ?? ?????:
HKEY_CLASSES_ROOT\CLSID
??? ???? ??????? ???? CLSID ????? ?? Microsoft Graph Chart ?? {00020803-0000-0000-C???-????????????}. ??? ??? ??? ????? ?? ??? ??? ??????? Implemented Categories ?(?????? ???????) ??????? ?????? ?? ??? ??? ???? ??? ?????? ??? ????? ??? ???????. ?? ??? ??????? ???? ?????? ??? ???:
HKEY_CLASSES_ROOT\CLSID\{00020803-0000-0000-C000-000000000046}\Implemented Categories
?? ???????? ?? ?????? ????? ???? ???? ????? CATID OLE ?????? Implemented Categories ?(?????? ???????). ???? ??? ?????? ????? ???? ??????:
HKEY_CLASSES_ROOT\CLSID\{00020803-0000-0000-C000-000000000046}\Implemented Categories\{F3E0281E-C257-444E-87E7-F3DC29B62BBD}

?????? ???? ???? ????? ?(CATID) ??????? OLE ?? {F3E0281E-C257-444E-87E7-F3DC29B62BBD}? ???? ????? ??????? ??????? ?( { } ).

????? ????? ?????? ???? ?? ???? ATL

????? ??? ????? ?????? ???? ?? ???? ATL? ??? ??? ????? ?????? ???? ?????? OleLoadFromStreamsuch ?? ????? ???? ??? ?????? ??????. ??? ???? ??????? ????? ????? ?????? ?????? ?????? ?? VB6/Windows ???? ???????.

????? ?? ???? ????? ??? ???? ?????? ??? ??? ???? ????????? ?? ?????? ???? ???? ?????? ?? ???? ?????????? ??????? ?? ??????? ?????? ??? ?????????. ???? ?? ???? ???????? ??? ???? ??????? ?????? ???? ??? ????????? ??? ???? ?? ???? ?????? ?? ????? ??? ???? ??? ?????. ????? ??????? ??? ???? ?????? ??? ???????? ???????.

?? ???? ?????? ?????? ???? ?? ???? ATL ?? ?? ??? ?????? ???? ????? ????? ??? ???????? ?????? ???? ????. ?? ???? ????? ?????? ???? ?? ???? ATL? ?? ???? ?? ??? ????? ?????. ??? ??? ?????? ?????? ???? ?? ATL? ???? ??? ??? ????? Microsoft Office ???? ??????? ?? ????? ??? ?????? ?? ??????? ?? ????? ?????? ???? ???? ??? ?????.

?????? ?????? ???? ?? ?????? ???? ???? ??? ????? ATL ???????? ?? ?????? NoOLELoadFromStreamChecks REG_DWORD ??? ?????? 00000001 ?? ????? ??????? ?????? ??????:

HKEY_CURRENT_USER/Software/Microsoft/Office/Common/Security

?????? ?? ???? ??? ???? ????? ??????? ?????? ???? ??? ?????? ???? REG_DWORD.

????? ????? ???? ????? ???????? ????? ?HTML ?????? ?????? ????????? ???????? Office

??? ????? ??? ??????? ??????? ????? ????? ????? ???????? ????? ???????? Office ??? ???? ?? ????? ?? ???? Internet Explorer.

?????? ??????? ?????? ??????? ???????? Office? ?? ?????? ???? REG_DWORD ?????? ?????? ??????? ??? ?????? 00000400 ?? ????? ??????? ?????? ??????:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{AE24FDAE-03C6-11D1-8B76-0080C744F389}

???? ??? ????? ?????? ?????? ?????? ???? ?? ???? ?????? ?? ????? ??? Office:
?? ??? ??????????? ??? ??????
???? ??????CLISD
Microsoft HTA Document 6.0{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}
htmlfile {25336920-03F9-11CF-8FD0-00AA00686F13}
htmlfile_FullWindowEmbed {25336921-03F9-11CF-8FD0-00AA00686F13}
mhtmlfile {3050F3D9-98B5-11CF-BB82-00AA00BDCE0B}
Web Browswer Control {8856F961-340A-11D0-A96B-00C04FD705A2}
DHTMLEdit {2D360200-FFF5-11D1-8D03-00A0C959BC0A}
???? ??? ?????? | ????? ???????

???????

???? ???????: 2252664 - ????? ??? ??????: 14/?????/1431 - ??????: 3.0
????? ???
  • Microsoft Office Word 2007
  • Microsoft Office Word 2003
  • Microsoft Office Excel 2007
  • Microsoft Office Excel 2003
  • Microsoft Office PowerPoint 2007
  • Microsoft Office PowerPoint 2003
  • Microsoft Office Publisher 2007
  • Microsoft Office Publisher 2003
  • Microsoft Office Visio Professional 2007
  • Microsoft Office Visio Standard 2007
  • Microsoft Office Visio Professional 2003
  • Microsoft Office Visio Standard 2003
????? ??????: 
kbsecvulnerability kbsecurity kbsecbulletin kbfix kbexpertiseinter kbbug atdownload kb983632 kb2252664 KB2252664
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????